Warning: Permanently added '10.128.0.135' (ED25519) to the list of known hosts.
2025/09/15 17:41:51 parsed 1 programs
[ 58.175256][ T4270] cgroup: Unknown subsys name 'net'
[ 58.285885][ T4270] cgroup: Unknown subsys name 'rlimit'
[ 59.630316][ T4270] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 61.933441][ T4294] chnl_net:caif_netlink_parms(): no params data found
[ 61.972175][ T4294] bridge0: port 1(bridge_slave_0) entered blocking state
[ 61.979540][ T4294] bridge0: port 1(bridge_slave_0) entered disabled state
[ 61.987910][ T4294] device bridge_slave_0 entered promiscuous mode
[ 62.002665][ T4294] bridge0: port 2(bridge_slave_1) entered blocking state
[ 62.009767][ T4294] bridge0: port 2(bridge_slave_1) entered disabled state
[ 62.017547][ T4294] device bridge_slave_1 entered promiscuous mode
[ 62.043431][ T4294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 62.054147][ T4294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 62.075344][ T4294] team0: Port device team_slave_0 added
[ 62.089016][ T4294] team0: Port device team_slave_1 added
[ 62.105504][ T4294] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 62.112500][ T4294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 62.138789][ T4294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 62.156369][ T4294] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 62.163845][ T4294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 62.189833][ T4294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 62.224262][ T4294] device hsr_slave_0 entered promiscuous mode
[ 62.230938][ T4294] device hsr_slave_1 entered promiscuous mode
[ 62.310661][ T4294] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 62.320626][ T4294] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 62.329601][ T4294] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 62.343433][ T4294] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 62.368671][ T4294] bridge0: port 2(bridge_slave_1) entered blocking state
[ 62.375909][ T4294] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 62.383595][ T4294] bridge0: port 1(bridge_slave_0) entered blocking state
[ 62.390647][ T4294] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 62.435623][ T4294] 8021q: adding VLAN 0 to HW filter on device bond0
[ 62.447012][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 62.457493][ T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 62.466442][ T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 62.475121][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 62.495179][ T4294] 8021q: adding VLAN 0 to HW filter on device team0
[ 62.507590][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 62.515965][ T11] bridge0: port 1(bridge_slave_0) entered blocking state
[ 62.523079][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 62.542725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 62.553890][ T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 62.560951][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 62.579956][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 62.588535][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 62.597289][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 62.614660][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 62.623383][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 62.635183][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 62.778872][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 62.786832][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 62.798719][ T4294] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 62.815283][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 62.831046][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 62.840389][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 62.848865][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 62.858048][ T4294] device veth0_vlan entered promiscuous mode
[ 62.868457][ T4294] device veth1_vlan entered promiscuous mode
[ 62.886051][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 62.894687][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 62.903106][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 62.913963][ T4294] device veth0_macvtap entered promiscuous mode
[ 62.922957][ T4294] device veth1_macvtap entered promiscuous mode
[ 62.936821][ T4294] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 62.944605][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 62.954017][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 62.965152][ T4294] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 62.972881][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 62.981604][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 62.993064][ T4294] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 63.003290][ T4294] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 63.012134][ T4294] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 63.020817][ T4294] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 63.114074][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 63.948065][ T4334] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 63.955920][ T4334] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 63.964860][ T4334] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 63.973625][ T4336] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 63.981079][ T4336] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 63.988412][ T4336] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 64.317785][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 64.329674][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 64.341841][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 64.354722][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 64.362893][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 64.371087][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
2025/09/15 17:41:59 executed programs: 0
[ 64.948742][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 64.956632][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 64.964565][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 64.973997][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 64.981977][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 64.989219][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 65.104058][ T4362] chnl_net:caif_netlink_parms(): no params data found
[ 65.142815][ T4362] bridge0: port 1(bridge_slave_0) entered blocking state
[ 65.149925][ T4362] bridge0: port 1(bridge_slave_0) entered disabled state
[ 65.158138][ T4362] device bridge_slave_0 entered promiscuous mode
[ 65.167092][ T4362] bridge0: port 2(bridge_slave_1) entered blocking state
[ 65.174250][ T4362] bridge0: port 2(bridge_slave_1) entered disabled state
[ 65.181974][ T4362] device bridge_slave_1 entered promiscuous mode
[ 65.203014][ T4362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 65.213670][ T4362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 65.234665][ T4362] team0: Port device team_slave_0 added
[ 65.243559][ T4362] team0: Port device team_slave_1 added
[ 65.260685][ T4362] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 65.267704][ T4362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 65.293641][ T4362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 65.305228][ T4362] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 65.312226][ T4362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 65.338423][ T4362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 65.366012][ T4362] device hsr_slave_0 entered promiscuous mode
[ 65.372718][ T4362] device hsr_slave_1 entered promiscuous mode
[ 65.379148][ T4362] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 65.386994][ T4362] Cannot create hsr debugfs directory
[ 65.930903][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 67.002384][ T48] Bluetooth: hci0: command 0x0409 tx timeout
[ 68.469660][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 68.520513][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 69.081542][ T4336] Bluetooth: hci0: command 0x041b tx timeout
[ 69.348137][ T4362] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 69.356841][ T4362] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 69.365378][ T4362] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 69.375140][ T4362] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 69.396047][ T46] device hsr_slave_0 left promiscuous mode
[ 69.402718][ T46] device hsr_slave_1 left promiscuous mode
[ 69.409028][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 69.416557][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 69.425073][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 69.432985][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 69.440618][ T46] device bridge_slave_1 left promiscuous mode
[ 69.447412][ T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 69.456921][ T46] device bridge_slave_0 left promiscuous mode
[ 69.464167][ T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 69.480790][ T46] device veth1_macvtap left promiscuous mode
[ 69.487070][ T46] device veth0_macvtap left promiscuous mode
[ 69.493309][ T46] device veth1_vlan left promiscuous mode
[ 69.499205][ T46] device veth0_vlan left promiscuous mode
[ 69.753514][ T46] team0 (unregistering): Port device team_slave_1 removed
[ 69.778478][ T46] team0 (unregistering): Port device team_slave_0 removed
[ 69.804706][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 69.831618][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 70.049717][ T46] bond0 (unregistering): Released all slaves
[ 70.146718][ T4362] 8021q: adding VLAN 0 to HW filter on device bond0
[ 70.163718][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 70.172144][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 70.183460][ T4362] 8021q: adding VLAN 0 to HW filter on device team0
[ 70.200113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 70.210777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 70.219147][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 70.226234][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 70.234052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 70.245140][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 70.254003][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 70.263284][ T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 70.270342][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 70.297467][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 70.306370][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 70.316136][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 70.325131][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 70.333774][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 70.343940][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 70.356838][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 70.365441][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 70.374366][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 70.386612][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 70.395061][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 70.405576][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 70.567006][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 70.574555][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 70.586185][ T4362] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 70.606903][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 70.615939][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 70.644643][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 70.653842][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 70.664150][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 70.672255][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 70.680844][ T4362] device veth0_vlan entered promiscuous mode
[ 70.695261][ T4362] device veth1_vlan entered promiscuous mode
[ 70.712047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 70.719956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 70.728649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 70.738755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 70.749986][ T4362] device veth0_macvtap entered promiscuous mode
[ 70.764871][ T4362] device veth1_macvtap entered promiscuous mode
[ 70.780430][ T4362] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 70.794921][ T4362] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 70.802507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 70.813676][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 70.822976][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 70.831466][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 70.840143][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 70.849376][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 70.860375][ T4362] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 70.870119][ T4362] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 70.879056][ T4362] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 70.887929][ T4362] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 70.976493][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 70.990442][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 71.000739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 71.010175][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 71.018739][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/09/15 17:42:05 executed programs: 2
[ 71.027223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 71.161282][ T4336] Bluetooth: hci0: command 0x040f tx timeout
[ 71.167900][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.174387][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[ 71.341305][ T4433] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 71.521298][ T4433] usb 1-1: Using ep0 maxpacket: 32
[ 71.530475][ T4433] usb 1-1: config 0 has an invalid interface number: 127 but max is 0
[ 71.538979][ T4433] usb 1-1: config 0 has no interface number 0
[ 71.545182][ T4433] usb 1-1: config 0 interface 127 has no altsetting 0
[ 71.554294][ T4433] usb 1-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=89.09
[ 71.570043][ T4433] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 71.578151][ T4433] usb 1-1: Product: syz
[ 71.582379][ T4433] usb 1-1: Manufacturer: syz
[ 71.586947][ T4433] usb 1-1: SerialNumber: syz
[ 71.596848][ T4433] usb 1-1: config 0 descriptor??
[ 71.833273][ T4433] usb 1-1: USB disconnect, device number 2
[ 71.842753][ T4433] ==================================================================
[ 71.850829][ T4433] BUG: KASAN: use-after-free in hdm_disconnect+0x109/0x1c0
[ 71.858030][ T4433] Read of size 8 at addr ffff888079289898 by task kworker/0:21/4433
[ 71.865990][ T4433]
[ 71.868305][ T4433] CPU: 0 PID: 4433 Comm: kworker/0:21 Not tainted syzkaller #0
[ 71.875823][ T4433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 71.885857][ T4433] Workqueue: usb_hub_wq hub_event
[ 71.890894][ T4433] Call Trace:
[ 71.894169][ T4433]
[ 71.897087][ T4433] dump_stack_lvl+0x168/0x22e
[ 71.901791][ T4433] ? __lock_acquire+0x7c50/0x7c50
[ 71.906818][ T4433] ? show_regs_print_info+0x12/0x12
[ 71.912005][ T4433] ? load_image+0x3b0/0x3b0
[ 71.916498][ T4433] ? __virt_addr_valid+0x465/0x540
[ 71.921607][ T4433] ? hdm_disconnect+0x109/0x1c0
[ 71.926453][ T4433] print_report+0xa8/0x210
[ 71.930862][ T4433] kasan_report+0x10b/0x140
[ 71.935370][ T4433] ? hdm_disconnect+0x109/0x1c0
[ 71.940207][ T4433] hdm_disconnect+0x109/0x1c0
[ 71.944873][ T4433] usb_unbind_interface+0x1ee/0x860
[ 71.950059][ T4433] ? kernfs_remove_by_name_ns+0x113/0x150
[ 71.955774][ T4433] ? usb_driver_release_interface+0x1b0/0x1b0
[ 71.961833][ T4433] device_release_driver_internal+0x522/0x850
[ 71.967893][ T4433] bus_remove_device+0x2e2/0x400
[ 71.972822][ T4433] device_del+0x628/0xa70
[ 71.977137][ T4433] ? kill_device+0x160/0x160
[ 71.981716][ T4433] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 71.987686][ T4433] ? usb_disconnect+0x107/0x8a0
[ 71.992525][ T4433] ? mutex_lock_nested+0x10/0x10
[ 71.997449][ T4433] ? _raw_spin_lock_irq+0xab/0xe0
[ 72.002465][ T4433] ? _raw_spin_lock_irqsave+0xf0/0xf0
[ 72.007832][ T4433] usb_disable_device+0x3e2/0x890
[ 72.012847][ T4433] usb_disconnect+0x348/0x8a0
[ 72.017523][ T4433] hub_event+0x1e24/0x54e0
[ 72.021942][ T4433] ? hub_post_resume+0x120/0x120
[ 72.026895][ T4433] ? read_lock_is_recursive+0x10/0x10
[ 72.032255][ T4433] ? _raw_spin_unlock_irqrestore+0xaa/0x100
[ 72.038139][ T4433] ? _raw_spin_unlock+0x40/0x40
[ 72.042983][ T4433] ? _raw_spin_unlock_irq+0x1f/0x40
[ 72.048171][ T4433] ? process_one_work+0x7a1/0x1160
[ 72.053273][ T4433] process_one_work+0x898/0x1160
[ 72.058203][ T4433] ? worker_detach_from_pool+0x240/0x240
[ 72.063839][ T4433] ? _raw_spin_lock_irq+0xab/0xe0
[ 72.068853][ T4433] ? _raw_spin_lock_irqsave+0xf0/0xf0
[ 72.074215][ T4433] ? kthread_data+0x4b/0xc0
[ 72.078709][ T4433] worker_thread+0xd62/0x1250
[ 72.083381][ T4433] kthread+0x29d/0x330
[ 72.087439][ T4433] ? worker_clr_flags+0x1a0/0x1a0
[ 72.092466][ T4433] ? kthread_blkcg+0xd0/0xd0
[ 72.097044][ T4433] ret_from_fork+0x1f/0x30
[ 72.101452][ T4433]
[ 72.104458][ T4433]
[ 72.106778][ T4433] Allocated by task 4433:
[ 72.111093][ T4433] kasan_set_track+0x4b/0x70
[ 72.115673][ T4433] __kasan_kmalloc+0x8e/0xa0
[ 72.120249][ T4433] hdm_probe+0x8f/0x13d0
[ 72.124489][ T4433] usb_probe_interface+0x5a0/0xaf0
[ 72.129586][ T4433] really_probe+0x2aa/0xc70
[ 72.134077][ T4433] __driver_probe_device+0x18c/0x330
[ 72.139355][ T4433] driver_probe_device+0x4f/0x420
[ 72.144367][ T4433] __device_attach_driver+0x2c6/0x510
[ 72.149725][ T4433] bus_for_each_drv+0x175/0x200
[ 72.154560][ T4433] __device_attach+0x29b/0x460
[ 72.159310][ T4433] bus_probe_device+0xbc/0x1e0
[ 72.164064][ T4433] device_add+0xa00/0xfb0
[ 72.168377][ T4433] usb_set_configuration+0x1991/0x1fd0
[ 72.173821][ T4433] usb_generic_driver_probe+0x89/0x150
[ 72.179273][ T4433] usb_probe_device+0x139/0x270
[ 72.184110][ T4433] really_probe+0x2aa/0xc70
[ 72.188608][ T4433] __driver_probe_device+0x18c/0x330
[ 72.193883][ T4433] driver_probe_device+0x4f/0x420
[ 72.198895][ T4433] __device_attach_driver+0x2c6/0x510
[ 72.204256][ T4433] bus_for_each_drv+0x175/0x200
[ 72.209092][ T4433] __device_attach+0x29b/0x460
[ 72.213841][ T4433] bus_probe_device+0xbc/0x1e0
[ 72.218589][ T4433] device_add+0xa00/0xfb0
[ 72.222902][ T4433] usb_new_device+0xd4d/0x1620
[ 72.227653][ T4433] hub_event+0x2d5e/0x54e0
[ 72.232056][ T4433] process_one_work+0x898/0x1160
[ 72.236979][ T4433] worker_thread+0xaa2/0x1250
[ 72.241640][ T4433] kthread+0x29d/0x330
[ 72.245696][ T4433] ret_from_fork+0x1f/0x30
[ 72.250103][ T4433]
[ 72.252409][ T4433] Freed by task 4433:
[ 72.256368][ T4433] kasan_set_track+0x4b/0x70
[ 72.260970][ T4433] kasan_save_free_info+0x2d/0x50
[ 72.265984][ T4433] ____kasan_slab_free+0x126/0x1e0
[ 72.271081][ T4433] slab_free_freelist_hook+0x131/0x1a0
[ 72.276523][ T4433] __kmem_cache_free+0xb6/0x1f0
[ 72.281359][ T4433] device_release+0x92/0x1c0
[ 72.285932][ T4433] kobject_put+0x21d/0x460
[ 72.290338][ T4433] hdm_disconnect+0xef/0x1c0
[ 72.294910][ T4433] usb_unbind_interface+0x1ee/0x860
[ 72.300093][ T4433] device_release_driver_internal+0x522/0x850
[ 72.306145][ T4433] bus_remove_device+0x2e2/0x400
[ 72.311076][ T4433] device_del+0x628/0xa70
[ 72.315391][ T4433] usb_disable_device+0x3e2/0x890
[ 72.320397][ T4433] usb_disconnect+0x348/0x8a0
[ 72.325060][ T4433] hub_event+0x1e24/0x54e0
[ 72.329461][ T4433] process_one_work+0x898/0x1160
[ 72.334384][ T4433] worker_thread+0xd62/0x1250
[ 72.339043][ T4433] kthread+0x29d/0x330
[ 72.343102][ T4433] ret_from_fork+0x1f/0x30
[ 72.347507][ T4433]
[ 72.349812][ T4433] The buggy address belongs to the object at ffff888079288000
[ 72.349812][ T4433] which belongs to the cache kmalloc-8k of size 8192
[ 72.363844][ T4433] The buggy address is located 6296 bytes inside of
[ 72.363844][ T4433] 8192-byte region [ffff888079288000, ffff88807928a000)
[ 72.377275][ T4433]
[ 72.379583][ T4433] The buggy address belongs to the physical page:
[ 72.385985][ T4433] page:ffffea0001e4a200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79288
[ 72.396123][ T4433] head:ffffea0001e4a200 order:3 compound_mapcount:0 compound_pincount:0
[ 72.404424][ T4433] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 72.412399][ T4433] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017442280
[ 72.420963][ T4433] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000
[ 72.429523][ T4433] page dumped because: kasan: bad access detected
[ 72.435921][ T4433] page_owner tracks the page as allocated
[ 72.441619][ T4433] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4433, tgid 4433 (kworker/0:21), ts 71819886495, free_ts 71753103948
[ 72.464347][ T4433] post_alloc_hook+0x173/0x1a0
[ 72.469101][ T4433] get_page_from_freelist+0x1a26/0x1ac0
[ 72.474634][ T4433] __alloc_pages+0x1df/0x4e0
[ 72.479208][ T4433] alloc_slab_page+0x5d/0x160
[ 72.483869][ T4433] new_slab+0x87/0x2c0
[ 72.487925][ T4433] ___slab_alloc+0xbc6/0x1230
[ 72.492588][ T4433] __kmem_cache_alloc_node+0x1a0/0x260
[ 72.498115][ T4433] kmalloc_trace+0x26/0xe0
[ 72.502521][ T4433] hdm_probe+0x8f/0x13d0
[ 72.506753][ T4433] usb_probe_interface+0x5a0/0xaf0
[ 72.511849][ T4433] really_probe+0x2aa/0xc70
[ 72.516347][ T4433] __driver_probe_device+0x18c/0x330
[ 72.521626][ T4433] driver_probe_device+0x4f/0x420
[ 72.526650][ T4433] __device_attach_driver+0x2c6/0x510
[ 72.532050][ T4433] bus_for_each_drv+0x175/0x200
[ 72.536890][ T4433] __device_attach+0x29b/0x460
[ 72.541640][ T4433] page last free stack trace:
[ 72.546296][ T4433] free_unref_page_prepare+0x8b4/0x9a0
[ 72.551747][ T4433] free_unref_page+0x2e/0x3f0
[ 72.556411][ T4433] qlist_free_all+0x76/0xe0
[ 72.560896][ T4433] kasan_quarantine_reduce+0x144/0x160
[ 72.566335][ T4433] __kasan_slab_alloc+0x1e/0x80
[ 72.571176][ T4433] slab_post_alloc_hook+0x4b/0x480
[ 72.576277][ T4433] __kmem_cache_alloc_node+0x140/0x260
[ 72.581727][ T4433] kmalloc_trace+0x26/0xe0
[ 72.586138][ T4433] gro_cells_destroy+0x340/0x420
[ 72.591058][ T4433] ip_tunnel_dev_free+0x15/0x50
[ 72.595894][ T4433] netdev_run_todo+0xbc9/0xd80
[ 72.600642][ T4433] ip_tunnel_delete_nets+0x31d/0x360
[ 72.605910][ T4433] cleanup_net+0x77b/0xb80
[ 72.610312][ T4433] process_one_work+0x898/0x1160
[ 72.615237][ T4433] worker_thread+0xaa2/0x1250
[ 72.619901][ T4433] kthread+0x29d/0x330
[ 72.623963][ T4433]
[ 72.626276][ T4433] Memory state around the buggy address:
[ 72.631887][ T4433] ffff888079289780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 72.639934][ T4433] ffff888079289800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 72.647980][ T4433] >ffff888079289880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 72.656021][ T4433] ^
[ 72.660849][ T4433] ffff888079289900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 72.668890][ T4433] ffff888079289980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 72.676927][ T4433] ==================================================================
[ 72.688176][ T4433] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 72.695387][ T4433] CPU: 0 PID: 4433 Comm: kworker/0:21 Not tainted syzkaller #0
[ 72.702927][ T4433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 72.712982][ T4433] Workqueue: usb_hub_wq hub_event
[ 72.718067][ T4433] Call Trace:
[ 72.721340][ T4433]
[ 72.724270][ T4433] dump_stack_lvl+0x168/0x22e
[ 72.728936][ T4433] ? memcpy+0x3c/0x60
[ 72.732911][ T4433] ? show_regs_print_info+0x12/0x12
[ 72.738099][ T4433] ? load_image+0x3b0/0x3b0
[ 72.742597][ T4433] panic+0x2c9/0x710
[ 72.746487][ T4433] ? bpf_jit_dump+0xd0/0xd0
[ 72.750989][ T4433] ? _raw_spin_unlock_irqrestore+0xf6/0x100
[ 72.756886][ T4433] ? _raw_spin_unlock+0x40/0x40
[ 72.761727][ T4433] ? print_memory_metadata+0x314/0x400
[ 72.767179][ T4433] check_panic_on_warn+0x80/0xa0
[ 72.772115][ T4433] ? hdm_disconnect+0x109/0x1c0
[ 72.776951][ T4433] end_report+0x66/0x110
[ 72.781182][ T4433] kasan_report+0x118/0x140
[ 72.785672][ T4433] ? hdm_disconnect+0x109/0x1c0
[ 72.790509][ T4433] hdm_disconnect+0x109/0x1c0
[ 72.795201][ T4433] usb_unbind_interface+0x1ee/0x860
[ 72.800391][ T4433] ? kernfs_remove_by_name_ns+0x113/0x150
[ 72.806096][ T4433] ? usb_driver_release_interface+0x1b0/0x1b0
[ 72.812148][ T4433] device_release_driver_internal+0x522/0x850
[ 72.818207][ T4433] bus_remove_device+0x2e2/0x400
[ 72.823135][ T4433] device_del+0x628/0xa70
[ 72.827448][ T4433] ? kill_device+0x160/0x160
[ 72.832019][ T4433] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 72.837987][ T4433] ? usb_disconnect+0x107/0x8a0
[ 72.842825][ T4433] ? mutex_lock_nested+0x10/0x10
[ 72.847749][ T4433] ? _raw_spin_lock_irq+0xab/0xe0
[ 72.852761][ T4433] ? _raw_spin_lock_irqsave+0xf0/0xf0
[ 72.858120][ T4433] usb_disable_device+0x3e2/0x890
[ 72.863133][ T4433] usb_disconnect+0x348/0x8a0
[ 72.867799][ T4433] hub_event+0x1e24/0x54e0
[ 72.872217][ T4433] ? hub_post_resume+0x120/0x120
[ 72.877147][ T4433] ? read_lock_is_recursive+0x10/0x10
[ 72.882506][ T4433] ? _raw_spin_unlock_irqrestore+0xaa/0x100
[ 72.888386][ T4433] ? _raw_spin_unlock+0x40/0x40
[ 72.893225][ T4433] ? _raw_spin_unlock_irq+0x1f/0x40
[ 72.898417][ T4433] ? process_one_work+0x7a1/0x1160
[ 72.903512][ T4433] process_one_work+0x898/0x1160
[ 72.908438][ T4433] ? worker_detach_from_pool+0x240/0x240
[ 72.914054][ T4433] ? _raw_spin_lock_irq+0xab/0xe0
[ 72.919066][ T4433] ? _raw_spin_lock_irqsave+0xf0/0xf0
[ 72.924427][ T4433] ? kthread_data+0x4b/0xc0
[ 72.928919][ T4433] worker_thread+0xd62/0x1250
[ 72.933591][ T4433] kthread+0x29d/0x330
[ 72.937649][ T4433] ? worker_clr_flags+0x1a0/0x1a0
[ 72.942656][ T4433] ? kthread_blkcg+0xd0/0xd0
[ 72.947234][ T4433] ret_from_fork+0x1f/0x30
[ 72.951656][ T4433]
[ 72.954877][ T4433] Kernel Offset: disabled
[ 72.959187][ T4433] Rebooting in 86400 seconds..